Getting PING bombed...
Craig A. Huegen
chuegen at quadrunner.com
Sat Oct 18 19:56:23 UTC 1997
On Sat, 18 Oct 1997, Jared Mauch wrote:
==> The warning of doing this is be sure you're running code that
==>doesn't generate icmp administrativeley prohibited messages for each packet
==>denied, else that will melt down your router cpu
For a Cisco, the only release this "fast drop" code is currently in is
11.1CA, release 11.1(13.5)CA and later. It is currently not in 11.2, but
is being worked on.
See http://www.quadrunner.com/~chuegen/smurf.txt for more information
regarding filtering/tracing capabilities (and information about "smurf"
attacks).
/cah
More information about the NANOG
mailing list